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AMENDMENTS TO THE CLAIMS 



1. (Currently Amended) A method for mediating event records between a generation layer 
of events and an operation system layer of events in a communications network by means of 
a mediation layer of events, which includes at least one first self-contained component of the 
mediation layer and at least one second self-contained component of the mediation layer, 
which operates independently of each first component of the mediation layer, and at least one 
buffer, the method comprising 

- collecting event records from an element of the generation layer of events substantially 
continuously as a stream, by the at least one first self-contained component of the 
mediation layer, 

- processing the collected event records substantially continuously, wherein the step of 
processing includes: 

- writing the output firom each of the at least one first self-contained component into 
one of said at least one buffer, and 

- reading the input for each of the at least one second self-contained component from 
one of said at least one buffer, 

delivering the processed event records to an element of the operation system layer of 
events substantially continuously as a stream, by the at least one second self-contained 
component of the mediation layer^ 
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- wherein the event records are passed through at least three self-contained components of 
the mediation layer, starting from one of the first self-contained components, then 
through at least one third self-contained component and finally through one of the 
second self-contained components, 

- wherein the step of delivering eyent records comprises 

- writing the event records output bv a preceding self-contained component of the 
mediation layer into a buffer, and 

- reading the buffer substantially continuously by the subsequent self-contained 
component of the mediation layer, 

- wherein after reading an event record from a buffer, a copy of the event record is 
retained in the buffer, and removed from the buffer only after successfiillv outputting the 
event record from the reading self-contained component of the mediation layer . 

2. (Original) A method according to claim 1, wherein at least part of the step of processing 
event records is performed by at least one first self-contained component of the mediation 
layer. 

3. (Previously Presented) A method according to claim 10, wherein at least part of the step 
of processing event records is performed by at least one second self-contained component of 
the mediation layer. 
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4. (Previously Presented) A method according to claim 1, wherein at least part of the step of 
processing event records is performed by at least one third self-contained component of the 
mediation layer that operates independently of the other self-contained components of the 
mediation layer. 

5. (Previously Presented) A method according to claim 1, wherein at least two different 
hosts are used such that at least one of the self-contained components of the mediation layer 
runs in a first host and at least one of the other self-contained components runs in another 
host. 

6. (Original) A method according to claim 4, comprising the steps of 

- delivering event records from each of the first self-contained components of the 
mediation layer to the at least one third self-contained component of the mediation layer 
via at least one buffer, and 

- delivering event records fi-om the third self-contained components of the mediation layer 
to one of the at least one second self-contained component of the mediation layer via at 
least one buffer. 

7-8. (Cancelled) 

9. (Currently Amended) A method according to claim 8 claim K wherein the preceding self- 
contained component of the mediation layer outputs event records into the buffer one by one, 
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and the subsequent self-contained component of the mediation layer reads event records from 
the buffer one by one. 

10. (Currently Amended) A method according to-elaim ^ claim 1 , wherein the preceding self- 
contained component of the mediation layer outputs event records into the buffer grouped 
into small groups of event records, and the subsequent self-contained component of the 
mediation layer reads event records from the buffer in small groups of event records. 

11. (Currently Amended) A method according to claim 8 claim L wherein at least two 
separate self-contained components of the mediation layer write event records into th e sam e 
ene -a single buffer. 

12. (Currently Amended) A method according to claim 8 claim 1 , wherein at least two 
separate self-contained components of the mediation layer read event records from on e and 
the sam e a single b uffer. 

13. (Cancelled) 

14. (Currently Amended) A method according to claim 13 claim K wherein the retained 
event record is mark with marked with status information indicating the "under processing" 
status of the event record. 

15. (Previously Presented) A method according to claim 1, comprising the steps of 
monitoring by a monitoring system the operation of the self-contained components of the 
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mediation layer and, in case of failure of any of the self-contained components, automatically 
setting up a new self-contained component to replace the failed component. 

16. (Previously Presented) A method according to claim 1, comprising the steps of 
monitoring by a monitoring system the production capacity of the self-contained components 
of the mediation layer and, in case of insufficient production capacity of any of the self- 
contained components, automatically setting up an auxiliary self-contained component 
parallel to the self-contained component with insufficient production capacity, 

17. (Currently Amended) A method according to claim L wh o roin the wherein an auxiliary 
self-contained component is set up to run in a host different to the host in which the self- 
contained component with insufficient production capacity runs. 

18. (Previously Presented) A method according to claim 1, comprising the steps of 

- receiving event records from the step of collecting in a source system format, 

- converting the received event records into a mediation layer format, 

- supplying the collected event records to the step of processing in the mediation layer 
format, 

- receiving the processed event records from the step of processing in the mediation layer 
format, 

- converting the processed event records into an operation system layer format, and 
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- supplying the processed event records to the step of deHvering in the operation system 
layer format. 

19. (Previously Presented) A method according to claim 1, wherein the step of processing 
event records comprises at least one of the following: validating and analysing event records, 
enrichment of event records, aggregation and correlation of event records, formatting of 
event records and rating. 

20. (Previously Presented) A method according to claim 1, wherein each of the self- 
contained components operates independently and continuously once started. 

21. (Previously Presented) A method according to claim 1, comprising the steps of 

- stopping the operation of a self-contained component by the self-contained component 
itself, and 

- performing said step of stopping the operation by the self-contained component only if 
instructed so by a manager component of the mediation layer. 

22. (Previously Presented) A method according to claim 1, comprising the steps of 

- providing each of the self-contained components with its own individual settings, and 

- each of the self-contained components functioning according to its own individual 
settings. 

23. (Original) A method according to claim 22, wherein said individual settings of each of 
the self-contained components include 
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- a node base part of the settings, which is identical to the node base parts of the other self- 
contained components within the mediation layer, and 

- a node application part of the settings, which contain custom processing rules and which 
is different to the node application parts of at least most of the other self-contained 
components within the mediation layer. 

24. (Currently Amended) A system for handling event records in a communications network 
between a generation layer of events and an operation system layer of events, the system 
comprising: 

- at l e ast two independent node components of a mediation layer for processing event 
records, each of the independent node components having its own settings according to 
which the node operates independently of other components of the system, at least twe 
e f three of the independent node components being configured to handle event records in 
series such that tho first a preceding independent node component writes the event 
records outputs output into a buffer and th e second a subsequent independent node 
component reads its input substantially continuously from the buffer, 

- at least one node manager component for configuring the node components, starting up 
the node components, monitoring the functioning of the node components and stopping 
the node components, when required, and 

- a system database for managing all configuration information of each component and 

for storing information on handled eventS;^ 
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- wherein after reading an event record from a buffer, a copy of the event record is 
retained in the buffer, and removed from the buffer only after successfully outputting the 
event record from the reading independent node component of the mediation layer . 

25. (Currently Amended) A system according to claim 24, wherein more than one 
independent node component have been configured to output into th e same a single b uffer. 

26. (Currently Amended) A system according to claim 24, wherein more than one 
independent node component have been configured to read its input fro m th e same a single 
buffer. 

27. (Previously Presented) A system according to claim 24, wherein at least two of the 
independent node components have been configured to input, process and output event 
records substantially continuously, 

28. (Previously Presented) A system according to claim 24, comprising a user interface for 
controlling, monitoring and configuring the system. 

29. (Currently Amended) A system according to claim 24, wherein the configuration or 
settings of any component can be changed by a supervisor at any time, without stopping the 
handling a handling p rocess. 

30. (Currently Amended) A system according to claim 24, wherein the tasks undertaken by 
the node components include collecting events records from a communication network. 
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aggregating event records, converting event records, analysing analyzing event records, 
correlating event records, enriching event records, formatting event records, rating events 
and/or delivering event records. 

31. (Previously Presented) A system according to claim 24, which is configured to process 
event records in several, simultaneously operating, and at least partly parallel streams. 

32. (Currently Amended) A system according to claim 24, comprising at least two audit trail 
counters for counting auditing values, such as numb e r which are individual quantities of at 
least two of a group of records consisting of: incoming records, rejected records, reprocessed 
records, records residing in a specific node component, records omitted due to filtering, 
records expired or deleted, new records created due to splitting or duplication, new records 
generated that are not related to input records, input records sent to aggregation/correlation 
process, records that were merged due to aggregation or correlation, resulting records that 
were completed and came out from the aggregation/correlation process, resulting records that 
were flushed out from the aggregation/correlation process, records left to a specific node 
component and/or records written out, 

33. (Previously Presented) A system according to claim 24, comprising at least one audit trail 
function for checking that no data is lost within the system. 
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34. (Previously Presented) A system according to claim 24, comprising at least one data 
storage component, wherein at least one node component is configured to write information 
on all of the events processed by the node component. 

35. (Currently Amended) A system according to claim 24, wherein the node manager 
component is configured to start up a new node component in case a node component in the 
system fails such that the new node component replaces the function of the failed component 
in th e proc e ssin g a processing chain. 

36. (Previously Presented) A system according to claim 24, wherein the node manager 
component is configured to start up a new node component parallel to a functioning node 
component in case the processing capacity of the system has to be raised. 

37. (Previously Presented) A system according to claim 24, wherein each of the node 
components comprise a node base providing basic functionality of the node component and 
an application containing processing rules, according to which the node component processes 
the event records input to the node component. 

38. (Original) A system according to claim 37, wherein the node bases of the node 
components are identical to each other. 

39. (Previously Presented) A system according to claim 37, wherein the node base includes 
an input module, an output module, an API module, a configuration module and an audit 
module. 
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40. (Previously Presented) A system according to claim 24, wherein the node components 
have been configured to continue their independent operation until instructed otherwise by 
the node manager component. 

41. (Previously Presented) A system according to claim 24, comprising at least two separate 
hosts, each of the hosts running at least one of the independent node components. 

42. (Currently Amended) A computer program product for a system for handling event 
records in a communications network between a generation layer of events and an operation 
system layer of events, which system comprises independent nodes of a mediation layer for 
processing event records, the computer program product comprising: 

- a node base program means capable of providing basic software functionality for an for 
the independent-nod e nodes , said basic software functionality including an external 
interface of the node and an intemal interface of the node, 

- an application programming interface means for receiving application programs for the 
independent nodes, which application programs are capable of interfacing with the 
intemal interfaces of the node compon e nts , 

- a node manager program means for setting up at least one node manager that is capable 
of constructing, configuring, starting up, monitoring and stopping the independent nodes, 
and 

- a user interface program means for setting up a user interface for configuring the at least 
one node manager^ 
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- wherein the system is adapted to pass the event records through at least three of the 
independent nodes, starting from one of at least one first independent node, then through 
at least one third independent node, and finally through one of at least one second 
independent node, 

- to write the event records output by a preceding independent node into a buffer, and 

- to read the buffer substantially continuously by a subsequent independent node of the 
mediation layer, 

- wherein after reading an event record from the buffer, a copy of the event record is 
retained in the buffer, and removed from the buffer only after successfully outputting the 
event record from the reading independent node of the mediation layer . 

43. (Original) A computer program product according to claim 42, wherein the node manager 
program means include program code means to direct a node manager to construct 
independent nodes by combining a copy of node base program means and an application 
program. 

44. (Previously Presented) A computer program product according to claim 42, wherein the 
application program contains logical rules according to which the node processes the event 
records input to the node. 
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45. (Previously Presented) A computer program product according to claim 42, wherein the 
external interface of the node enables the node to communicate with other nodes and the 
node manager. 

46. (Previously Presented) A computer program product according to claim 42, wherein the 
node manager program means include program code means to direct a node manager, in case 
a node in the system fails, to construct, configure and start up a new node that replaces the 
function of the failed node. 

47. (Previously Presented) A computer program product according to claim 42, wherein the 
node manager program means include program code means to direct a node manager, in case 
of insufficient production capacity of any of the nodes, to construct, configure and start up a 
new node parallel to the node with insufficient production capacity. 

48. (Previously Presented) A computer program product according to claim 42, wherein the 
application programming interface means are capable of supporting several programming 
languages. 

49. (Previously Presented) A computer program product according to claim 42, which is 
capable of configuring the nodes to form processing chains of serially connected independent 
nodes, for processing the event records. 

50. (Currently Amended) A computer program product according to claim 49, which is 
capable of configuring the nodes in the processing chains to transfer event records from the 
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prec e ding a preceding node in the chain to the Guboequ e nt a subsequent node in the chain by 
means of a buffer. 

51. (Previously Presented) A computer program product according to claim 42, which is 
capable of configuring the nodes to function continuously and independently until instructed 
otherwise by the node manager. 

52. (Previously Presented) A computer program product according to claim 42, which 
supports multi-host execution and is capable starting up nodes in different hosts, and 
configuring the nodes in different hosts to form processing chains for processing the event 
records. 



